Static task
static1
Behavioral task
behavioral1
Sample
28d47ae6f44c6800b6f17b0da3200a68_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28d47ae6f44c6800b6f17b0da3200a68_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28d47ae6f44c6800b6f17b0da3200a68_JaffaCakes118
-
Size
68KB
-
MD5
28d47ae6f44c6800b6f17b0da3200a68
-
SHA1
31e90a95b95aca2dac89c5cb5888f60f6bbf90c7
-
SHA256
432432b5dca806e5da7a3c87f593f5e7d60899342c021fd7ee395a174568c874
-
SHA512
4dcb3a52aa658ba0b36571c5a689ba1ba5f9c7f76c0d90aa574d5d7a6eff0d5c11c758b84116f08b66650ac3b8178883b915364b1db2fa188de33bdc42d8b9c1
-
SSDEEP
1536:kIx6UzTnNe6l0xP2FyAlHBDoaor5jefGzsvJrAawmZqvDkV4:eul0xP2bBDe5jeezsvTZ0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d47ae6f44c6800b6f17b0da3200a68_JaffaCakes118
Files
-
28d47ae6f44c6800b6f17b0da3200a68_JaffaCakes118.dll windows:4 windows x86 arch:x86
8ac19e8d621e8e7759b3cd1022febc3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAdjustment
NlsGetCacheUpdateCount
SetupComm
HeapCompact
SetConsoleKeyShortcuts
LockFile
SetEnvironmentVariableA
GetLongPathNameA
FindNextChangeNotification
AddConsoleAliasW
FindNextFileW
IsDBCSLeadByteEx
IsBadHugeReadPtr
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE